Privacy notice

Who processes your data

The data controller is Demetra s.r.l.s., VAT no. 09088360723, Via Alessandro Maria Calefati 188, 70122 Bari (BA), Italy, which operates the holiday rental “Demetra Exclusive Apartment” (national identification code CIN IT072006B400128944).

You can reach us through the details on the Contact page for anything concerning your data.

We have not appointed a Data Protection Officer: the conditions set out in Article 37 of Regulation (EU) 2016/679 do not apply to us.

If you write to us through the form

When you fill in the form we collect your name, your email address, the text of your message and, if you provide them, your arrival and departure dates and the number of guests. None of it ends up in a database on this site: the form produces an email that arrives in our inbox, and that is where it stays.

We use it for one purpose: replying to you. The legal basis is the performance of pre-contractual measures taken at your request (Article 6(1)(b) of the Regulation). The consent box in the form is there so that you are aware of the processing before you send anything.

We do not use your address to send you marketing and we do not pass it to anyone. If you want to receive our offers you will have to subscribe separately, and you will be able to unsubscribe whenever you like.

We keep your message for as long as it takes to handle your enquiry and any stay that follows from it, and in any case no longer than 24 months from our last contact. You can ask us to delete it sooner.

If you stay with us

Italian law places some obligations on hosts that are not a matter of choice, and that you cannot object to if you wish to stay:

• The identity details of every guest must be reported to the State Police within 24 hours of arrival, through the “Alloggiati Web” portal (Article 109 of the Italian consolidated public security act). This is why identity documents are checked in person at check-in.
• The data needed to collect the city tourist tax must be reported to the Municipality of Bari, in the manner and within the deadlines set by its regulations.
• Statistical data on tourist flows must be sent to the Apulia Region and to ISTAT, the national statistics institute, in aggregate form.

Data collected automatically

Like any website, the server hosting these pages logs the requests it receives: IP address, date and time, page requested, browser type. This keeps the site running, protects it from abuse and helps diagnose faults. The legal basis is our legitimate interest in the security of the service (Article 6(1)(f)).

These logs are not used to identify you or to build a profile of your habits. No analytics, advertising or profiling tools are installed on this site.

Who we share data with

We do not sell or trade your data. We do rely on a few suppliers who process it on our behalf, as data processors:

Transfers outside the European Union

Some of the suppliers listed above are based, or keep servers, in the United States. Those transfers rely on the Standard Contractual Clauses approved by the European Commission and, where applicable, on the supplier's certification under the EU-U.S. Data Privacy Framework.

For the United Kingdom the European Commission has issued an adequacy decision, so no further safeguards are required.

If you book

Bookings are not completed on this site. Once you choose your dates you are taken to our booking system, a separate service with its own privacy notice: from that point on, whatever you enter is handled under the rules set out on those pages.

The same applies if you found us through a platform such as Booking.com or Airbnb: those platforms are independent controllers of the data they collect, and pass on to us only what is needed to host you.

Your rights

At any time you can ask us:

• to tell you what data we hold about you and to give you a copy of it (Articles 15 and 20);
• to correct it if it is wrong or incomplete (Article 16);
• to erase it (Article 17);
• to restrict its use, or to object to processing based on legitimate interest (Articles 18 and 21).

How to exercise them, and who to turn to

Simply write to us using the details on the Contact page: we reply within one month. There is no special form to fill in and no charge.

Some rights have a limit: we cannot erase data that the law obliges us to report and retain, such as the details sent to the State Police or those contained in tax records.

If you believe your data is being handled improperly you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or to the supervisory authority of the country where you live. You can also take the matter to court.

Changes to this notice

If we change how we handle data — by adding an analytics tool, for instance — we will update this page and the date shown at the top. Please read it again before sending us new information.